With the whole concept of "No Free Bugs", wouldn't the scenario be much more simpler or pleasant by working it like this?
Researcher: "Hey you guuuysss... do you have a bounty program?"
$Company: "No, we don't do bounties, we have _professionals_...."
Researcher: "I see, well do your professionals do bounties?"
$Company: "What are you getting at?"
Researcher: "You really should do bounties, I can wait a a little while, but you shouldn't."
$Company: "It sounds like you are threatening us."
Researcher: "Does it really? Because I'm planning on having a get together with a bunch of other folks on my findings, and we are going to go step by step on my findings, how I found my findings, how my findings are important, and how they probably should be fixed"
$Company: "Uh, wait, what do you mean a bunch of other folks"
Researcher: "Oh, you know, other folks that probably use this, they are most likely interested, but that's why I came to you first. But you are making it sound like you aren't interested."
$Company: "Oh, well maybe we'll show up to this so-called get together"
Researcher: "That'd really be a good idea; I am sure I mentioned this get together was x$USD per attendee, I can send you an email with the tiers"
$Company: "Wait, what... I thought you just wanted to work with us to show us something and get paid for it"
Researcher: "See, I knew you guys could speak the same language, and I honestly wanted to keep it simple. I am glad you are seeing it my way and willing to work my terms now"
$Company: "... "
Comments
0 B
|👍
/👎